Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa
File:                     b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa (raw, json)
Hash identifier:          89q2sq+WK13jURQP/rc/g8vIfFABMGZ2Uk4ShvTZvJM=
Subject key identifier:   7C:C8:8A:80:BC:96:F2:C8:2A:60:22:28:78:92:34:52:B7:C4:AB:0A
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584CC07C992FCF9B4E528A221280
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     6250
IP address blocks:        216.163.120.0/23 maxlen: 24
                          216.163.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:99:2f:cf:9b:4e:52:8a:22:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=0d3da71e-d7d9-4681-8885-c51e8f9df20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:34:4f:89:8e:f8:d9:a0:70:7e:ce:a9:3f:
                    a1:fd:8d:de:ab:b8:11:9c:0b:d8:cf:25:da:82:60:
                    b0:7d:a1:f2:6a:00:51:96:cc:bd:c7:cb:df:b3:5c:
                    28:c3:1e:96:bd:75:69:22:c0:2c:f1:61:3b:04:36:
                    68:7f:e9:59:74:8b:f3:dc:2a:6a:99:02:96:f9:44:
                    bd:b0:d8:a3:d6:7d:21:3a:59:18:f5:49:80:8b:5f:
                    16:b3:3f:4d:5b:7d:30:01:ed:21:aa:88:8a:15:20:
                    20:62:8f:36:d6:aa:1a:2a:f8:a3:f6:02:d7:9b:bc:
                    7a:da:66:5a:3d:ff:53:b7:02:2b:ad:a8:6f:d8:cf:
                    65:e1:9f:c4:9a:a4:63:5e:cd:5e:38:ef:c5:c3:cf:
                    c0:08:9f:e9:65:68:e5:af:49:2e:d5:88:fa:33:86:
                    6e:cd:97:c0:b3:51:86:f2:70:24:3a:09:24:64:07:
                    aa:06:b3:01:cc:02:d8:1d:c1:a0:ac:85:e8:c6:6f:
                    a4:ee:87:1c:41:63:ca:1d:ce:39:c5:d7:33:9a:39:
                    f0:cf:4d:ab:5b:46:bf:a5:74:70:bb:e7:70:e6:14:
                    d2:80:4a:35:dc:8a:cc:71:67:02:c5:f1:f9:a8:d3:
                    d2:59:66:4c:6e:41:e5:44:f3:5b:dc:cc:dd:67:95:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C8:8A:80:BC:96:F2:C8:2A:60:22:28:78:92:34:52:B7:C4:AB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.163.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:f6:9a:54:88:c6:7e:9f:b9:d9:bb:23:9f:77:66:b2:41:
         36:e8:37:9f:76:33:35:b2:06:53:37:1d:89:d1:6d:1f:b6:a0:
         eb:97:29:5a:aa:89:c3:62:4b:ef:f3:aa:1b:6e:c0:5e:71:41:
         e7:7a:e5:94:20:f0:81:33:d1:b3:b0:a9:d8:23:a8:13:83:99:
         db:06:4c:51:01:5b:39:6c:a7:68:44:a5:6f:71:a9:b6:78:d7:
         6b:d6:ae:c4:c8:de:8e:3f:42:8e:61:59:ac:0f:75:0f:21:43:
         eb:23:9f:f5:4f:94:ba:f2:c5:4c:f4:2e:f9:bb:73:54:e2:af:
         51:15:d1:c5:ea:01:9b:6d:d1:cd:0a:28:39:a3:2b:8b:f6:73:
         ae:ee:1f:8e:71:e0:79:50:03:1d:83:59:96:c6:7a:cc:7d:b9:
         f4:db:83:2f:4c:5a:92:08:45:9a:a8:f4:b7:28:38:bf:4d:c1:
         4b:21:93:5f:b5:0d:f9:4f:87:54:03:b1:89:16:8a:2f:49:bd:
         3f:2b:c3:14:e2:0f:f9:96:ce:96:08:04:00:43:14:db:70:22:
         e7:82:1c:54:c5:e0:75:03:4d:08:36:8f:50:2a:2b:6b:ed:3a:
         42:ba:54:7f:37:c1:1a:cb:df:81:fe:81:69:03:66:fe:fe:92:
         d3:48:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 12:58:22 2026 by rpki-client